However, I think the main drawbacks of hardware wallets are ignoring the private-keys backup problem. Private-key/secret-word loss is a larger risk than theft.
I think the best Bitcoin wallet practice should be a grass-root solution base on mobile phone platform.
And, with perfect security data backed-up which can resist bruce-force attack.
Then base on the decentralized key management mobile app, there will be third party provide multi signature api which can mix traditional access control, such as device id, IP address, geographic location, the amount of funds.
Combine these two aspects, I think this will be the future wallet.
I do not think that a mobile application can be provided with sufficient levels of protection. The mobile phone is too multifunctional. Too multitasking. It turns out that none of its applications can not be completely secure. There is no guarantee that downloading updates to the Instagram will not load the virus for your wallet. And then geolocation will not help.
I can easily come up with 5-6 ways to get into your wallet application. Starting from the connection to the charger, ending with the features of the firmware of the device itself. And I'm not a hacker,
By what investors? Hardware wallets are universally considered the best option for storing coins in terms of security. While you are correct in saying that no wallet can provide you with 100% security, you can always mitigate risk by using more than one wallet to separate your funds- for example a software wallet along with a hardware wallet.
I think this is really the best option. Just do not put all the eggs in one basket and act reasonably.